In the Linux kernel, the following vulnerability has been resolved:
io_uring/af_unix: disable sending io_uring over sockets
File reference cycles have caused lots of problems for io_uring in the past, and it still doesn't work exactly right and races with unix_stream_read_generic(). The safest fix would be to completely disallow sending io_uring files via sockets via SCM_RIGHT, so there are no possible cycles invloving registered files and thus rendering SCM accounting on the io_uring side unnecessary.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-5.10.205-195.804Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.145-95.156Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-devel | Aug 28, 2024 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.72-96.166Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade bpftool | Feb 17, 2025 | May 8, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 14, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 14, 2024 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-rt_debugUpgrade kernel-obs-buildUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade kernel-kvmsmall-vdsoUpgrade dtb-alteraUpgrade dtb-qcomUpgrade gfs2-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-syms-rtUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-default-develUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade kernel-preempt-develUpgrade dtb-socionextUpgrade kernel-azureUpgrade kernel-defaultUpgrade dtb-appleUpgrade dtb-sprdUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade kernel-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-zfcpdumpUpgrade dtb-armUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade kernel-default-baseUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-rt-livepatchUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade kernel-macrosUpgrade kernel-default-livepatch-develUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade dtb-amdUpgrade kernel-develUpgrade kernel-symsUpgrade dtb-hisilicon | Jun 13, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub